1201
On Liberating My Smartwatch from Cloud Services
I’ve often said that if we convince ourselves that technology is magic, we risk becoming hostages to it . Just recently, I had a brush with this fate, but happily, I was saved by open source.
Topics /
Security & Privacy
The most popular blog posts about security & privacy on Hacker News. 8,762 posts.
1202
How Chrome OS, Termux, YubiKey and Duo Mobile make for great usable security
How Chrome OS, Termux, YubiKey & Duo Mobile make for great usable security. A travel Chromebook for modern development, online and offline.
1203
Guccifer 2.0: DNC's servers hacked by a lone hacker
Worldwide known cyber security company CrowdStrike announced that the Democratic National Committee (DNC) servers had been hacked by “sophisticated” hacker groups. I’m very please…
1204
1205
4Chan Lawyer publishes Ofcom correspondence
Ofcom — driven by the letter of British law that they are bound to follow, but still Ofcom — are quietly making Britain look (a) very silly and (b) as if we haven’t yet shucked-off the Americ…
1206
Chromium project finds that 70% of security defects are memory safety problems
The Chromium project finds that around 70% of our serious security bugs are memory safety problems . Our next major project is to prevent such bugs at source.
1207
Across the US, people are dismantling and destroying Flock surveillance cameras
Anger over ICE connections and privacy violations is fueling the sabotage. PLUS: 10,000 drivers call on Uber to repay stolen wages, a man is arrested at a public hearing about a data center and more.
1208
Australia’s vague anti-encryption law sets a dangerous new precedent
The Assistance and Access (A&A) law requires tech companies to help law enforcement agencies break into individuals’ encrypted data.
1209
Superhuman embeds tracking pixels in user emails
Over the past 25 years, email has weaved itself into the daily fabric of life. Our inboxes contain everything from very personal letters, to work correspondence, to unsolicited inbound sales pitches. In many ways, they are an extension of our …
1210
1211
Malicious Subtitles Threaten Kodi, VLC and Popcorn Time Users
Check Point researchers revealed a new attack vector which threatens millions of users worldwide – attack by subtitles. By crafting malicious subtitle %
1212
Vulnerability allows cross-browser tracking in Chrome, Firefox, Safari, and Tor
Unveiling a scheme flooding vulnerability across major browsers. Learn how it threatens anonymous browsing.
1213
GitHub notification emails used to send malware
Malicious actors are abusing legitimate notification emails sent by GitHub to try and trick people into downloading malware.
1214
iOS 11 Horror Story: The Rise and Fall of iOS Security
We loved what Apple used to do about security. During the past years, the company managed to build a complete, multi-layer system to secure its hardware and sof
1215
Bytecode Breakdown: Unraveling Factorio's Lua Security Flaws
Dynamic languages are safe from memory corruptions bugs, right?
1216
With Windows 10, Microsoft Disregards User Choice and Privacy
Microsoft had an ambitious goal with the launch of Windows 10: a billion devices running the software by the end of 2018. In its quest to reach that goal, the company aggressively pushed Windows 10 on its users and went so far as to offer free upgrades for a whole year. However, the company’s...
1217
TikTok updated privacy policy to collect faceprints and voiceprints (2021)
TikTok has violated privacy regulations before, and they are in position to share millions of American users' data with the Chinese government.
1218
Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library
The PyPI package lightning was compromised in versions 2.6.2 and 2.6.3 with Mini Shai-Hulud themed malicious code to execute credential-stealing malware on import.
1219
1220
Protecting Google Cloud customers without impacting performance
If you’ve been keeping up on the latest tech news, you’ve undoubtedly heard about the CPU security flaw that Google’s Project Zero disclosed last Wednesday. On Friday, w…
1221
How I discovered a hidden microphone on a Chinese NanoKVM
NanoKVM is a hardware KVM switch developed by the Chinese company Sipeed. Released last year, it enables remote control of a computer or server using a virtu...
1222
Is Gmail killing independent email?
People report that self-hosted emails always end up in Gmail spam. Is there anything Google can do about it?
1223
Is Grammarly a keylogger? What can you do about it?
Is Grammarly a keylogger? Here's what to consider so employees can reap the benefit of this valuable tool without compromising data security.
1224
A Hacker's Replacement for Gmail
Note: Since writing this I’ve replaced Exim with Postfix and Courier with Dovecot. This is outlined in the Addendum, but the main text is unchanged. Please read the whole guide before starting, as you can skip some of the steps and go straight to the final system.
1225
CCC captures U.S. military biometrics database
The U.S. military used biometric devices en masse to capture people in Afghanistan. Some devices were left behind during the hasty withdrawal of NATO troops. CCC researchers found large amounts of...
1226
You can't leak users' data if you don't hold it
When I was still working at Faculty , we took on a new client that was not yet named Matter . We eventually transitioned from an agency-client relationship to a startup relationship, where I became the VP of Technology. This is what I’ve been doing for the past two-ish years.
1227
First public macOS kernel memory corruption exploit on Apple M5
Apple spent five years building hardware and software to make memory corruption exploits dramatically harder. Our engineers, working together with Mythos Preview, built a working exploit in five days.
1228
1229
“Should you encrypt or compress first?”
Appcanary makes sure you never run vulnerable software on your servers. Like our blog? Subscribe to our newsletter or podcast . Browse the archive , or follow us on twitter , github or rss .
1230
A supply chain attack on PyTorch
Security tends to lag behind adoption, and AI/ML is no exception. Four months ago, Adnan Khan and I exploited a critical CI/CD vulnerability in PyTorch, one of the world’s leading ML platform…